According to Foresight News, a joint report by the Federal Bureau of Investigation (FBI), National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and the UK's National Cyber Security Centre (NCSC) reveals that the Russian malware Infamous Chisel is being used to target cryptocurrency wallets, exchange applications, and other data. The report links the malware to the Russian GRU military intelligence agency's Sandworm hacker group, which has been targeting the Ukrainian military. The malware is designed to allow persistent access to compromised Android devices via the Tor network and to regularly collect and send data from these devices. Additionally, the software searches for Web3 browser Brave, Binance, Coinbase, Trust Wallet, Telegram, and Discord file directories, targeting the Android Keystore system that allows users to store private keys and extracting every file in the directory.